Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.mft
File:                     A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.mft (raw, json)
Hash identifier:          6oWnjyOhQnVRPWayCeoe+fOd9USPXptb7g9OIwIm1+E=
Subject key identifier:   57:7A:53:29:76:73:64:26:91:91:2A:A9:10:CF:FC:11:44:EE:2E:FF
Authority key identifier: A5:F5:DB:F9:5A:DD:EC:D0:94:90:4E:D7:FC:75:F9:D7:D5:99:4C:D6
Certificate issuer:       /CN=A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6
Certificate serial:       53FE9B53F4C0396E62B507AC886213E42F595ECC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.mft
Manifest number:          E0
Signing time:             Tue 17 Sep 2024 16:19:21 +0000
Manifest this update:     Tue 17 Sep 2024 16:14:21 +0000
Manifest next update:     Wed 18 Sep 2024 18:30:21 +0000
Files and hashes:         1: A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.crl (hash: whC0xCO5iL7CmX5bGjJq5T08fdMnE/dlzoUxKRC0YqE=)
                          2: 34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa (hash: xICUCfhvCfHx0WPQO/+N4NtNghqpLvoWm83KRqZ6egE=)
                          3: 323830343a353930633a3a2f33322d3332203d3e20323638313636.roa (hash: FLBEyP71rriuooW16hRZQJxNk49QPcKyGzFEGeq41oA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fe:9b:53:f4:c0:39:6e:62:b5:07:ac:88:62:13:e4:2f:59:5e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6
        Validity
            Not Before: Sep 17 16:14:21 2024 GMT
            Not After : Sep 18 18:30:21 2024 GMT
        Subject: CN=577A53297673642691912AA910CFFC1144EE2EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:a7:35:5f:9b:10:f4:1b:7d:12:bf:97:0f:
                    0d:01:17:76:39:8c:b3:37:47:78:51:e6:af:17:91:
                    3f:04:aa:a3:c1:bf:e4:68:35:7d:30:35:be:82:70:
                    01:c1:1e:93:3e:91:e9:92:55:6e:e5:48:fb:77:5c:
                    89:af:3d:48:1d:bc:b5:f8:3b:2e:b0:97:01:37:b2:
                    fe:c6:fd:18:69:a0:76:89:3d:7e:77:ad:6f:c8:42:
                    86:86:74:f4:b8:96:df:88:13:2f:62:bf:af:ae:1b:
                    ec:6b:c3:3e:fe:47:54:88:78:03:65:19:83:0a:d9:
                    ac:45:e5:a1:c3:db:27:4c:df:95:97:62:c8:b0:7b:
                    fc:04:53:de:29:01:ed:4f:b9:73:90:1d:15:fe:1a:
                    52:ee:75:78:60:91:29:2f:49:88:48:46:d9:db:b0:
                    35:cf:55:c9:e8:fa:a5:d7:78:13:02:2e:74:46:dd:
                    1a:27:d2:81:ab:1c:e5:17:6b:d8:96:1c:2e:e6:7f:
                    17:af:3c:9d:13:9d:b0:7b:47:85:71:40:7a:01:1f:
                    e6:6f:54:cb:12:88:6f:5d:c4:d6:47:27:07:9b:92:
                    da:2d:f8:8e:d5:1b:2e:c9:2c:eb:b8:f2:80:1d:cf:
                    c4:82:f8:bd:34:1f:22:13:35:52:32:08:c3:5c:e7:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:53:29:76:73:64:26:91:91:2A:A9:10:CF:FC:11:44:EE:2E:FF
            X509v3 Authority Key Identifier:
                keyid:A5:F5:DB:F9:5A:DD:EC:D0:94:90:4E:D7:FC:75:F9:D7:D5:99:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:48:f4:c1:c7:7b:20:e4:40:72:3e:5e:28:85:96:40:3f:e9:
         46:e8:e1:59:58:62:f9:da:ee:8d:37:c0:46:4c:df:8a:cc:19:
         0a:b8:16:d9:29:3f:5c:45:9c:dd:37:c2:8a:d9:99:9b:ed:e5:
         a1:1b:1d:65:0d:04:fd:d6:ac:80:67:ee:82:55:6a:67:d7:72:
         14:54:0e:5f:1f:60:4d:b8:c1:f4:59:ba:ec:40:90:94:1a:60:
         cc:cb:05:cd:6d:cc:f5:e9:f4:8d:62:cd:a3:d3:ed:a6:c8:e9:
         53:e5:ca:7d:9b:9c:ee:c8:16:74:20:34:a5:3a:20:51:d4:45:
         61:28:19:a3:3f:50:0b:dc:e1:c3:1f:60:f2:63:aa:8f:a0:bb:
         57:4e:e2:3b:f7:07:24:76:93:ee:c8:03:9e:91:72:90:f0:b4:
         8c:02:d5:cd:aa:08:2d:28:da:90:12:6d:1c:67:26:67:2f:65:
         d1:69:ce:d3:c9:c5:2b:f2:34:0b:36:e9:8a:61:14:e0:44:b3:
         7e:1d:e5:f4:54:d6:bc:b3:a0:82:bd:3a:05:0c:6a:73:f4:10:
         5c:2d:3b:61:a0:28:66:5e:e9:ae:63:af:aa:d9:f2:96:d8:03:
         67:58:89:a3:57:b2:da:58:3a:30:1f:fd:d6:9c:d3:19:69:b0:
         8d:35:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----